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Foreword: 


The increasing application and sophistication of information 
processing systems within the Agency creates an environment of high 
potential for the loss, compromise, or disclosure of national security 
intelligence and personal information stored in or processed by these 
systems. The achievement and maintenance of a high level of security for 
this information is ultimately dependent upon the individual employee. 
This becomes especially true in information processing systems where 
substantial amounts of highly sensitive information and highly 
sophisticated technology meet in a dynamic environment. 


With this publication, the Information Systems Security Group of the 
Office of Security is initiating Information Systems Security Notes and 
Guidelines to provide guidance, information, and procedures in support 
of regulatory issuances in this highly complex_area. The principle 
regulation in the area of ADP systems security is computer 
SECURITY POLICY AND RESPONSIBILITIES. When applied and 
followed, these Notes and Guidelines should enhance the protection 
against loss, compromise, or accidental disclosure of information. Each 
employee associated with ADP equipment and/or systems should be 
familiar with the provisions contained in these Notes and Guidelines and 
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